Infrastructure as Code

Lessons from the field. Always landing on my feet.

All Cloud Security Identity Security Microsoft Sentinel AI Security Detection Engineering Microsoft Defender Threat Detection Entra ID Container Security Zero Trust DevSecOps Infrastructure as Code Agentic AI 3 posts
Jerrad Dahlager
Jerrad Dahlager, CISSP, CCSP Cloud Security Architect · Adjunct Instructor
About me →
Detection Engineering

GigaWiper Detection as Code: Testing Custom Detections in Sentinel Repositories

Review update (September 25, 2026): The merged September 25 source now chooses a labeled executable identity from populated SHA1, then SHA256, then a normalized path; it excludes empty identity values. Its KQL semantic analysis and offline suite …

30 min read Read more →
AI Security

Building an LLM Prompt Injection Firewall with AWS Lambda

Review update (September 25, 2026): The September 25 merged source uses documented metric-filter IS TRUE/IS FALSE operators while retaining the distinct Logs Insights grammar. Metrics, alarm and dashboard share a project-specific namespace. New …

15 min read Read more →
Infrastructure as Code

Terraform 1.11 Write-Only Arguments: Keep Supported Secrets Out of State

Review update (September 25, 2026): The reviewed provider pins are historical evidence, not an evergreen supported toolchain. Before a new deployment, review Key Vault API retirement and AzureRM major-version migration notes. Keep state protections …

10 min read Read more →